TL;DR: HP distributed an update for Conexant audio driver that also included a keylogger. The drivers were correctly signed and this keylogger has already existed on HP computers since at least Christmas 2015. It's unclear who's responsible for this situation.